Evilotus 1.0
(Backdoor.Win32.Agent.alt)
(Trojan.Win32.Agent.ads)

by ?


Released in December 2006

Made in China

more versions


Server:
dropped file:
c:\WINDOWS\system32\Evilotus.dll
size: 27,648 bytes 

added to registry:
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_EVILOTUS\0000\Control
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Evilotus
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\C
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_EVILOTUS\0000\Control
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Evilotus


tested on Windows XP
January 15, 2007

MegaSecurity